search

uBlockOrigin / uAssets

Resources for uBlock Origin, uMatrix: static filter lists, ready-to-use rulesets, etc.
GNU General Public License v3.0
4.13k stars 770 forks source link

youtubemp3org.me #7931

Closed Yuki2718 closed 4 years ago

Yuki2718 commented 4 years ago

URL(s) where the issue occurs

https://youtubemp3org.me/v4/

Paste any YT video (< 30 min) url and click, I used https://www.youtube.com/watch?v=NKN6yZz0qls.

Describe the issue

  1. Popup (may be NSFW) on clicking a download button:

  2. The current rule savemedia.website##+js(aopw, encodeURIComponent) breaks the DL button.

Screenshot(s)

youtubemp3org

Versions

Settings

Notes

savemedia.website##+js(ra, onclick) or savemedia.website##+js(nowoif) for 1.

Also they make requests with random domains created by inline-script. I tested ||youtubemp3org.me^$csp=script-src 'self' *.googleapis.com *.twitter.com (working fine) but you'll know better.

Yuki2718 commented 4 years ago

@mapx- Do you see the random domain requests? Maybe not need to care about?

mapx- commented 4 years ago

the domain is always the same on my end, no new tab is opened

Yuki2718 commented 4 years ago

Not about popup, but these called from L25 of https://youtubemp3org.me/v4/'s source:

youtubemp3org1

Hmm... somehow now they're always the same but previously I saw ingratitudedaintyblockade.com. Looks like not a serious matter but wanted to hear your diagnosis.

mapx- commented 4 years ago

yes, in firefox it works: youtubemp3org.me##^script:has-text(pper)

uBlock-user commented 4 years ago

you can also try youtubemp3org.me##+js(aopr, document.styleSheets)

mapx- commented 4 years ago

and chrome youtubemp3org.me##+js(set, String.fromCharCode, noopFunc)

Yuki2718 commented 4 years ago

@mapx- @uBlock-user Thank you both!